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Abstract 

This  program  theoretically  and  experimentally  investigated  the  private  information 
capacity  of  optical  channels  under  experimental  constraints.  Theoretical  work  estab¬ 
lished  upper  and  lower  bounds  on  the  Holevo  secrecy  capacity  for  optical  channels, 
including  channels  in  turbulent  atmosphere,  and  developed  the  coding  and  modulation 
techniques  to  approach  the  maximum  key  distribution  rate  over  optical  channels,  in 
the  regime  of  simultaneously  high  photon  and  bandwidth  efficiencies.  The  program 
also  developed  two  quantum  key  distribution  (QKD)  protocols  that  achieve  an  infor¬ 
mation  capacity  of  multiple  secure  bits  per  photon  pair,  providing  the  first  security 
proofs  for  experimentally  realizable  high-dimensional  QKD  schemes  against  collective 
attacks.  These  protocols  represent  quantum  secure  versions  of  pulse-position-  mod¬ 
ulation  schemes  that  are  commonly  employed  in  energy-constrained  electromagnetic 
channels.  Novel  adaptive  pulse-position  modulation  and  layered  coding  schemes  pro¬ 
vide  efficient  error  correction.  The  experimental  effort  developed  QKD  hardware  in 
silicon  photonic  integrated  circuits  (PIC),  including  waveguide-integrated  supercon¬ 
ducting  nanowire  single  photon  detectors.  Ultra-bright  waveguide-based  entangled 
pair  generation  was  demonstrated  with  record  high  entanglement  purity  measured  us¬ 
ing  dispersion-compensated  Franson  interferometry.  QKD  systems  were  demonstrated 
with  secure  key  generation  in  excess  of  6  Mbit/second  and  a  photon  efficiency  in  excess 
of  3  secure  bits  per  detected  photon. 
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2 


1  Introduction 


To  understand  the  limits  of  optical  communications,  it  is  necessary  to  consider  light  at 
the  level  of  photons,  described  by  quantum  theory.  This  theory  has  profound  consequences, 
including  the  possibility  of  transmitting  information  in  unconditionally  secure  ways  [1] .  This 
report  addresses  open  questions,  including  the  information  capacity  and  transfer  rate  of 
optical  channels,  which  are  not  only  of  fundamental  importance  in  information  science, 
but  are  also  of  increasing  technological  relevance  in  emerging  communication  systems  that 
offer  new  possibilities  in  terms  of  speed,  security,  and  power  consumption.  We  summarize 
the  results  of  experimental  and  theoretical  investigations  on  the  fundamental  information 
capacity  of  optical  communications  and  the  development  of  new  quantum  cryptographic 
protocols  that  approach  these  capacities,  and  we  summarize  experimental  advances  at  the 
device  and  system  level  that  have  enabled  quantum  key  distribution,  secure  against  collective 
attacks,  at  greater  than  one  bit  per  detected  photon  pair  and  faster  than  3  Mbit/s. 

The  report  is  organized  as  follows.  Section  2  addresses  fundamental  limits  of  privacy 
capacities  of  optical  communications.  Upper  and  lower  bounds  for  the  ergodic  Holevo  ca¬ 
pacities  of  private  information  transmission  are  derived  over  the  multiple  spatial-modes  in  a 
turbulent  channel.  Section  3  describes  new  types  of  large-alphabet  QKD  protocols  employ¬ 
ing  high-dimensional  correlations  in  temporal  and  spectral  degrees  of  freedom  of  entangled 
photon  pairs.  We  demonstrate  security  proofs  based  on  entanglement  visibility  estimates 
based  on  Alice’s  and  Bob’s  measurements  in  two  conjugate  bases.  In  one  protocol,  the  basis 
transformations  are  realized  using  dispersive  optical  elements  [2],  In  the  other  protocol,  the 
visibility  is  estimated  based  on  measurements  in  Franson  interferometers  [3].  Section  4  de¬ 
scribes  the  hardware  developed  for  implementing  high-dimensional  QKD  schemes,  focusing 
on  (i)  the  photonic  integrated  circuit  (PIC)  architecture,  (ii)  an  ultrabright  source  of  entan¬ 
gled  degenerate  telecom-band  photon  pairs  based  on  a  PPKTP  waveguide,  (iii)  high-visibility 
Franson  interferometry,  and  (iv)  PIC  integration  of  superconducting  nanowire  single  photon 
detectors  (SNSPDs).  Section  5  discusses  the  QKD  system  demonstrations,  including  novel 
coding  schemes  for  high-efficiency  error  correction  specifically  tailored  to  high-alphabet  QKD 
schemes. 


2  Information  Capacity  of  a  Photon  and  Transmission 
in  Free  Space 

Of  fundamental  importance  in  reaching  high  photon  efficiency  (many  bits/detected  pho¬ 
ton)  is  to  understand  the  potential  benefit  of  using  multiple  spatial  modes.  The  benefit  is 
not  obvious:  while  the  use  of  multiple  spatial  modes  increases  the  alphabet  size  of  entan¬ 
gled  photon  pairs  (through  hyperentanglement),  it  comes  at  the  cost  of  increased  errors  due 
to  cross-talk  and  potentially  increased  channel  loss.  To  understand  these  trade-offs,  MIT 
analyzed  the  information  capacity  of  optical  communications  in  free  space  using  multiple 
spatial  modes  under  an  average  photon- number  constraint  [4,  5].  The  problem  statement  is 
illustrated  in  Fig.  1. 

Optical  communication  with  high  photon  efficiency  (many  bits/photon)  and  high  spec¬ 
tral  efficiency  (bits/sec-Hz)  is  possible  only  through  the  use  of  multiple  spatial  modes.  For 
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Figure  1:  Optical  communication  over  M  spatial  modes  under  average  photon- number  constraint. 
The  notional  beam  splitter  represents  the  random  sub-unity  transmissivity,  r],  of  an  arbitrary 
transmitted  spatial  mode. 


instance,  at  the  Holevo  limit,  189  spatial  modes  would  enable  10  bits/photon  and  5  bits/sec- 
Hz,  but  a  joint-detection  receiver,  for  which  no  explicit  realization  has  been  demonstrated, 
would  be  needed  to  achieve  this  performance.  On  the  other  hand,  it  should  be  possible  to 
approach  the  Shannon  limit  for  binary  encoding  and  direct  detection  with  available  equip¬ 
ment,  but  4500  spatial  modes  would  be  necessary  for  such  a  system  to  achieve  10  bits/photon 
and  5  bits/sec-Hz.  Moreover,  all  of  these  performance  figures  assume  equal-transmissivity 
spatial  modes  that  retain  their  orthogonality  after  propagation  through  the  channel.  In 
practical  scenarios  employing  atmospheric  or  optical  fiber  links,  mode-dependent  loss  and 
intermodal  cross-talk  must  be  taken  into  account.  MIT  derived  power  transmissivity  bounds 
and  intermodal  cross-talks  for  the  turbulent  channel.  These  bounds  depend  only  on  the  mu¬ 
tual  coherence  function  of  the  atmospheric  Green’s  function,  and  thus  apply  in  both  weak 
and  strong  turbulence  and  can  be  evaluated  for  arbitrary  turbulence  distributions  along  the 
propagation  path. 

The  MIT  team  showed  that  any  multiple-mode  noiseless  bosonic  wiretap  channel  is  equiv¬ 
alent  to  a  group  of  parallel  (i.e.,  noninterfering)  single-mode  channels.  Then,  the  total  chan¬ 
nel  capacity  can  be  computed  from  the  optimal  allocation  of  photons  to  the  M  modes.  Fig.  2 
shows  the  ergodic  holevo  secrecy  capacities  for  sets  of  ~200  focused-beam  (FB),  Hermite- 
Gaussian  (HG),  and  Laguerre-Gaussian  (LG)  modes.  These  were  evaluated  for  operation 
with  adaptive  and  non-adaptive  receivers  for  realistic  values  of  uniformly-distributed  turbu¬ 
lence,  as  detailed  in  Ref.  [5].  These  plots  point  to  the  following  major  results: 

•  bounds  on  ergodic  Holevo  secrecy  capacities  for  near-field  operation  with  adaptive- 
optics  and  non-adaptive  receivers 

•  bounds  evaluated  for  FB,  HG,  and  LG  modes 

•  HG  and  LG  modes  shown  to  have  same  ergodic  Holevo  secrecy  capacities 

•  FB  modes  outperform  HG  and  LG  modes  when  adaptive  optics  are  employed 

•  HG  and  LG  modes  outperform  FB  modes  when  adaptive  optics  are  not  employed 
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(a)  (b) 

Figure  2:  Upper  and  lower  bounds  on  photon  information  efficiency,  as  functions  of  spectral 
efficiency,  of  the  ergodic  Holevo  private  capacities  for:  (a)  M  =  225  FB-mode  systems;  and  (b) 
M  =  231  HG  or  LG  systems.  These  results  assume  square-pupil  transmitters  and  receivers  with 
identical  d  =  17.6  cm  side  lengths,  and  operation  at  A  =  1.55 /im  wavelength  over  an  L  —  1km 
propagation  path.  Solid  lines  are  for  systems  with  perfect  adaptive  optics,  while  dashed  lines  are 
for  systems  without  adaptive  optics. 

2.1  Secrecy  of  Bosonic  Wiretap  Channel 

The  Wornell  group  has  investigated  the  secrecy  capacity  of  the  bosonic  wiretap  channel. 
The  team  has  proved  a  new  upper  bound  on  the  secrecy  capacity  of  the  bosonic  wiretap 
channel.  This  bound  does  not  rely  on  any  unproven  conjecture,  including  the  entropy  photon- 
number  inequality  [6]. 


3  QKD  Protocols 

High- dimensional  quantum  key  distribution  (QKD)  [7]  allows  two  parties,  Alice  and  Bob, 
to  establish  a  secure  cryptographic  key  at  a  potentially  higher  rate  than  that  afforded  by 
standard,  two-dimensional  QKD  protocols  [8,  9].  When  the  photonic  states  are  measured 
using  a  high- dimensional  Hilbert  space,  more  than  one  bit  of  information  can  be  generated 
when  a  single  photon  is  detected.  Additionally,  increasing  the  dimension  of  a  QKD  pro¬ 
tocol  provides  greater  resilience  to  noise  [10].  High-dimensional  QKD  protocols  have  been 
implemented  by  encoding  information  in  various  photonic  degrees  of  freedom,  including 
position-momentum  [11],  time  [12,  13,  14,  15],  energy-time  [16],  and  orbital  angular  momen¬ 
tum  (OAM)  [17,  18,  19].  Because  we  desired  a  protocol  that  is  maximally  compatible  with 
modern-day  fiber  communications  systems,  we  focused  on  the  use  of  temporal  encoding  of 
information. 

The  time-energy  entanglement  of  photon  pairs  produced  by  spontaneous  parametric 
downconversion  was  previously  used  in  high- dimensional  experiments  [12,  20],  but  these 
works  lacked  rigorous  security  proofs.  Security  proofs  for  time-energy  entanglement-based 
HDQKD  have  been  attempted  by  discretizing  the  continuous  Hilbert  space  to  permit  use 
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of  discrete- variable  security  analyses  [21,  22],  but  the  validity  of  the  discretization  approach 
has  not  been  proven  and  it  only  provides  security  against  individual  attacks.  We  developed 
security  proofs  that  combine  the  best  elements  of  discrete-variable  and  continuous-variable 
security  analysis  [23,  24],  In  particular,  the  latter  employs  the  quadrature-component  co- 
variance  matrix  to  derive  a  lower  bound  on  the  secure-key  rate  in  the  presence  of  a  collective 
attack.  In  the  two  high-dimensional  QKD  schemes  developed  in  this  program,  we  took  an 
analogous  approach  by  bounding  Eve’s  information  from  an  estimate  of  the  time-frequency 
covariance  matrix.  The  two  protocols  differ  in  the  experimental  implementation  in  which 
the  relevant  covariance  matrices  are  estimated.  In  ‘Dispersive  Optics’  QKD  (DO-QKD)  [25], 
the  covariance  matrix  is  estimated  from  Alice’s  and  Bob’s  measurements  performed  with  our 
without  group  velocity  dispersion.  In  the  other  protocol,  we  employ  dual-basis  interferome¬ 
try  to  estimate  the  covariance  matrix  from  correlation  measurements  performed  in  Franson 
and  conjugate-Franson  interferometers  [3]. 

3.1  Dispersive  Optics  Quantum  Key  Distribution 

Using  a  high-dimensional  alphabet,  the  DO-QKD  protocol  is  closely  analogous  to  pulse 
position  modulation  (PPM)  to  maximize  the  secret-key  capacity  under  technical  constraints 
such  as  limited  numbers  of  photon  produced  or  limited  number  of  detector  clicks  per  unit 
time.  We  have  completed  a  thorough  analysis  of  the  DO-QKD  protocol,  proving  security 
against  collective  attacks. 

Alice  and  Bob  build  a  secure  key  by  measuring  the  arrival  times  of  entangled  photons. 
To  start,  Alice  shares  a  clock  with  Bob  and  generates  a  biphoton  state  by  spontaneous 
parametric  down  conversion  (SPDC).  In  the  weak  pumping  regime,  the  down-converted 
state  can  be  approximated  by  J^°  be)  \tA,  be)  dtAdtB,  where  | tA,tB)  — 

a\{tA)cJB{tB)  |0>  and  a\{tj)  (aj B(tj))  denotes  the  creation  operator  at  time  tj  for  Alice  (Bob). 
We  approximate  ^(tA,tB)  oc  exp[-(tA  -  tB)2  /  kcr2cor]  exp[-(tA  +  tB)2 /16cr2oh]  exp[icup/2  ■  (tA  + 
tB)],  where  acoh  is  the  coherence  time  of  the  pump  held  at  ujp  and  the  correlation  time,  acor , 
is  given  by  the  phase  matching  bandwidth  of  the  SPDC  crystal.  |Tab)  therefore  describes 
the  superposition  of  photon  pair  states  with  duration  of  order  acor  over  a  period  of  order 

&coh- 

In  the  protocol,  Alice  and  Bob  measure  their  photon’s  time  of  arrival  randomly  either 
directly  or  in  a  conjugate  basis.  They  build  the  key  from  the  correlated  timing  events  from  in 
the  same  (publicly  compared)  basis  choices,  using  error  correction  and  privacy  amplification 
[26]. 

A  crucial  question  concerns  the  implementation  of  the  conjugate  basis  measurement.  We 
shoed  that  conjugate  basis  measurements  are  achieved  using  a  unitary  transformation  U 
that  can  be  easily  implemented  using  second-order  dispersion  (SOD),  characterized  by  the 
parameter  /32  =  d2  /  du2  {ne^uj  /  c) ,  where  neff  is  the  effective  index  of  the  mode,  u  is  the  mode 
frequency,  and  c  is  the  speed  of  light  in  vacuum.  A  second-order  dispersive  element  imparts  a 
phase  on  each  frequency  state  <£>  oc  d-iu2 .  Physically,  /A  is  proportional  to  the  linear  change  in 
the  group  velocity  as  a  function  of  frequency.  The  SOD  operator  is  unitary  and  its  frequency 
domain  representation,  A  is  diagonal. 

Classically,  a  transform-limited  pulse  is  spread  in  a  dispersive  medium  as  its  frequency 
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components  move  out  of  phase.  However,  Ref.  [27]  showed  that  if  the  entangled  photons 
pass  through  dispersive  media,  in  the  limit  of  large  acoh,  crcor  becomes 

/2  ^  fl'cor  +  (fig. aLa  +  P2bLbY_  s 

acor  ~  o  ’ 

u  cor 

where  /32a  (/32 b)  is  the  GVD  introduced  by  Alice  (Bob)  over  length  La  ( Lb ).  Assume  that 
La  =  Lb  =  L  and  /?tot  =  /32a  +  /An-  As  /3tot  increases,  the  temporal  correlation  between 
Alice’s  and  Bob’s  photon  decreases.  However,  a'cor  =  acor  if  /La  =  ~/32 b  =  /A-  which  requires 
that,  to  a  global  phase,  A^  =  f  e~l^2ALu°  \uj0)  (o;0|  du>0  =  A^,  where  ui0  is  the  frequency 
detuning  from  the  center  frequency  of  the  biphoton  pulse.  Thus,  if  Alice  applies  normal 
dispersion,  Ua,  on  her  photon,  Bob  can  apply  anomalous  dispersion,  Ub  =  U\,  on  his 
photon  to  recover  the  temporal  correlations  between  their  photons.  Thus,  Alice  and  Bob’s 
measurements  in  the  ‘dispersed’  basis  are  also  correlated,  as  required. 

In  Ref.  [25],  we  proved  security  against  general  coherent  attacks  through  measurements 
by  Alice  and  Bob  in  two  conjugate  bases,  which  are  implemented  using  only  single-photon 
detectors  and  simple  dispersive  optics  with  group  velocity  dispersion  (GVD).  DO-QKD  ben¬ 
efits  from  the  robustness  of  temporal  correlations  in  single-mode  fiber  and  free  space.  We 
estimate  that  practical  implementations  could  reach  a  secret-key  capacity  of  ~  3  bits/photon 
over  up  to  ~  250  km  of  fiber.  Fig.  3  shows  the  secret-key  capacity  calculated  from  covariance 
matrix  approach  to  establish  an  upper  bound  on  Eve’s  information  given  collective  attacks. 


3.2  Quantum  Key  Distribution  using  Dual-basis  Interferometry 


As  was  shown,  the  dispersive-optics  scheme  en¬ 
ables  measurements  of  the  time-frequency  covari¬ 
ance  matrix.  However,  commercial  dispersive  op¬ 
tics  elements  with  high  group  velocity  dispersion 
can  can  introduce  significant  loss  of  approximately 
3  dB  for  each  party.  A  potentially  simpler  tech¬ 
nique  experimentally — utilizing  a  Franson  interferom¬ 
eter  (FI) — was  conjectured  [12,  20]  to  suffice  for  se¬ 
curity  verification.  Its  robustness  against  some  spe¬ 
cific  attacks  has  been  discussed  [20,  28],  but  security 
against  collective  attacks  had  not  been  proven,  and 
[28]  suggests  such  a  proof  may  be  impossible. 

We  recently  showed  that  time-energy  entanglement- 
based  HDQKD  can  be  made  secure  against  Eve’s 
collective  attack  when  a  Franson  interferometer  is 
used  for  security  verification,  together  a  frequency- 
difference  measurement  based  on  dispersion.  The 
proof  relates  the  fringe  visibility  of  the  Franson  in¬ 
terferometer  to  the  time-frequency  covariance  matrix. 
Together  with  the  frequency- difference  measurement, 
these  measurements  upper-bound  Eve’s  Holevo  infor- 


Figure  3:  Top:  key  generation  rate 
(bits/second).  Bottom:  Secret  key  ca¬ 
pacity  AI  in  units  of  bits  per  clicks 
(bpc),  postselected  for  frames  in  which 
both  Alice  and  Bob  register  at  least  one 
detector  click. 
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mation,  enabling  a  calculation  of  Alice  and  Bob’s  se¬ 
cure  key  capacity. 

Details  of  the  protocol  are  reported  in  Ref.  [3] ;  we 
replicate  here  the  key  generation  rate  and  photon  efficiency  in  terms  of  bits  per  coincidence. 
As  in  the  DO-QKD  protocol,  we  assume  superconducting  detectors  with  realistic  (demon¬ 
strated)  performance  figures  and  high  Franson  visibility  already  demonstrated  by  members  of 
this  team  [29].  Figure  4’s  left  panel  plots  Alice  and  Bob’s  SKR  versus  transmission  distance 
for  two  frame  durations  and  two  system  efficiencies  for  Alice  (77^4)  and  Bob’s  (j]b)  receivers. 
We  see  that  low-efficiency  SNSPDs  allow  QKD  out  to  200  km,  while  high-efficiency  SNSPDs 
promise  QKD  out  to  300  km,  and  going  from  15%  to  90%  system  efficiency  increases  the 
SKR  by  approximately  two  orders  of  magnitude. 


Transmission  distance  (km)  Transmission  distance  (km) 

Figure  4:  Left  panel:  Alice  and  Bob’s  SKR  versus  transmission  distance.  Right  panel:  Alice  and 
Bob’s  PIE  versus  transmission  distance.  Details  on  assumed  experimental  parameters  are  provided 
in  Ref.  [3]. 


4  Hardware 

4.1  Photonic  Integrated  Chip 

Photonic  integrated  circuits  (PIC)  offer  a  robust  and  scalable  platform  for  fundamental 
quantum  optics  experiments  and  quantum  communication  technologies.  We  have  developed 
a  PIC  architecture  to  implement  the  two  QKD  protocols  described  above. 

Dual-Basis  Interferometry  (Sect.  3.2):  Alice  and  Bob  have  identical  chips  which  contain  a 
photonic  integrated  circuit  (PIC)  for  the  key  generation  and  the  security  check.  An  incident 
photon  on  Alice’s  or  Bob’s  setup  is  analyzed  either  (1)  directly  on  a  photon  detector  or  (2) 
after  a  Mach  Zehnder  interferometers  that  makes  up  one  half  of  a  Franson  interferometer, 
which  enables  a  measurement  of  the  degree  of  entanglement  between  the  two  photons  [30]. 
These  measurements  corresponds  to  projections  in  two  bases,  (1)  and  (2).  A  measurement  by 
Eve  reduces  the  entanglement,  which  could  be  detected  in  the  Franson  fringe  visibility  [3]. 


The  optical  circuit  that  implements  these  measurements  is  illustrated  in  Figure  5,  in  which 
the  ‘X’  symbols  represent  switches  that  randomly  channel  photons  between  ‘key  generation’ 
and  ‘security  check’  (the  two  switches  in  Bob’s  or  Alice’s  setup  are  synchronized.) 


Figure  5:  An  entangled  photon  state  is  generated  by  spontaneous  parametric  down  conversion; 
this  is  approximated  at  the  biphoton  given  in  the  top  of  the  figure.  One  photon  is  sent  to  Alice, 
the  other  to  Bob.  These  parties  either  measure  the  timing  of  the  photon  pair  to  establish  a  private 
key,  or  they  check  the  security  of  the  protocol  using  a  Franson  interferometer.  The  Franson  inter¬ 
ferometer  employs  two  unbalanced  MZ  interferometers  with  time-difference  At,  enabling  coherence 
measurements  to  2Af.  A  small  path  difference  St  is  used  to  change  the  coincidence  probability  from 
maximum  to  minimum. 

PICs  were  designed  and  fabricated  in  collaboration  with  Dr.  Solomon  Assefa  at  the  IBM 
T.J.  Watson  Research  Center  IBM  in  Yorktown  Heights,  New  York.  They  were  fabricated 
using  193-nm  optical  lithography,  followed  by  dry  etching  to  define  channel  waveguides.  Cou¬ 
pling  to  and  from  the  chip  was  done  through  tapered  Si  waveguides  coupled  to  polymer  and 
silicon  nitride  (SiN)  edge  couplers.  Fig.  6  shows  on-chip  Franson  interferometers,  consist¬ 
ing  of  two  unbalanced  MZIs  with  a  300  ps  path-length  difference  in  the  form  of  a  meander 
waveguide.  Photons  coupled  into  the  PIC  are  either  directed  directly  to  a  single  photon 
detector  for  key  generation,  or  they  can  be  directed  into  the  MZI  to  perform  the  security 
check,  as  discussed  in  Sect.  3.2  and  Ref.  [3]. 

How  this  routing  is  performed  can  be  seen  from  the  close-up  image  of  the  waveguide /MZI 
interface  in  Fig.  7.  The  three-ring  structures  provides  a  ~  2  nm  bandpass  drop  filter  into 
the  MZI.  The  multi-ring  structure  enables  the  creation  of  a  top-hat  transmission  function, 
as  opposed  to  the  Lorentzian  function  for  a  single  ring  [31].  The  splitting  ratio  is  tunable 
by  shifting  the  drop  filter  resonance  with  respect  to  the  (fixed)  biphoton  frequency  band, 
using  optical  carrier  injection  into  the  rings.  Typically,  both  three- ring  drop  filters  would  be 
switched  simultaneously.  The  switching  was  confirmed  at  speeds  in  excess  of  1  GHz,  using 
800  nm  tuning  pulses  provided  by  a  TkSapphire  mode-locked  laser. 

Figure  8  shows  experimental  measurements  of  the  on-chip  Franson  interferometers.  In 
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Top  View  of  MZIs 


Meander-delay 
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Inverse  Tapered  Couplers 


Figure  6:  Counterclockwise  from  top  left:  (i)  An  optical  micrograph  of  the  PIC,  showing  two 
unbalanced  MZIs  with  tunable  drop  filters  for  selecting  key  generation  or  security  check,  (ii)  Close- 
up  SEM  of  directional  coupler,  (iii)  Close-up  of  inverse  tapered  waveguide  edge  couplers,  at  the 
location  of  the  polymer  waveguide/silicon  channel  waveguide  interface,  (iv)  SEM  of  MZI/filter 
region,  showing  here  a  5-ring  drop  filter  configuration  as  in  Ref.  [31]. 


Figure  7:  Close-up  of  a  MZI/drop  filter  network,  shown  here  in  the  3-ring  drop  filter  configuration. 


this  experiment,  entangled  photon  pairs  were  generated  using  SPDC  in  a  PPKTP  waveguide. 
These  photons,  which  were  degenerate  at  1550  with  a  2-nm  bandwidth,  were  coupled  into 
two  on-chip  PICs  located  5  meters  apart.  One  of  the  PICs  was  temperature-tuned  with 
respect  to  the  other  to  realize  a  path  length  tuning  between  their  two  arms,  as  illustrated 
in  Fig.  8(a).  The  classical  and  4th  order  interference  results  are  shown  in  Fig.  8(b)  and  (c), 
respectively.  In  these  experiments,  the  directional  couplers  had  to  be  tuned  to  compensate 
for  the  large  waveguide  loss  in  the  longer  MZI  arm.  This  required  approximately  a  splitting 
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ratio  of  approximately  72/28.  This  imbalance  was  not  perfectly  achieved,  causing  a  loss 
in  interference  visibility.  Other  devices  are  currently  being  investigated  to  improve  the 
interference  visibility  above  the  70%  observed  thus  far.  We  note  that  these  are  the  first  chip- 
based  Franson  interferometer  measurements  reported  to  date.  In  addition  to  on-chip  Franson 
interferometers,  these  PICs  were  used  for  on-chip  integration  of  graphene  detectors  [32]  and 
SNSPDs  [33], 


Figure  8:  (a)  Experimental  setup:  Degenerate  telecom- wavelength  photon  pairs  are  generated 
using  a  PPKTP  waveguide  source,  then  signal  and  idler  are  separated  by  polarization  and  coupled 
into  two  separate  PICs  about  5  meters  apart.  The  visibility  is  measured  from  coincidences  on 
the  outputs  of  the  two  unbalanced  MZIs.  The  phase  is  thermally  modulated  on  one  of  the  MZIs. 
(b)  First-order  coherence  function  measured  for  one  of  the  MZIs.  [[[MUST  STILL  connect  this  to 
Franson  visibility]]]  (c)  Coincidences  measured  across  both  MZIs  indicates  a  visibility  of  70%. 

The  Wong  group  demonstrated  the  highest  Hong-Ou-Mandel  visibility  on-chip  till  date  [34]. 
This  is  performed  in  the  near-infrared  with  nanofabricated  silicon  nanophotonic  directional 
couplers,  with  raw  visibilities  on-chip  up  to  90.5%.  Spectrally-bright  1557-nm  two-photon 
states  are  generated  in  a  periodically-poled  KTi0P04  waveguide  chip,  serving  as  the  entan¬ 
gled  photon  source  and  pumped  with  a  self-injection  locked  laser,  for  the  photon  statistical 
measurements,  as  shown  in  Fig.  ??.  Efficient  four-port  coupling  in  the  communications  C- 
band  and  in  the  high-index-contrast  silicon  photonics  platform  is  demonstrated,  with  match¬ 
ing  theoretical  predictions  of  the  quantum  interference  visibility  as  summarized  in  Fig.  10. 
Constituents  for  the  residual  quantum  visibility  imperfection  are  examined,  supported  with 
theoretical  analysis  of  the  sequentially-triggered  multipair  biphoton  (Fig.  11),  towards  scal¬ 
able  high-bitrate  quantum  information  processing  and  communications.  The  on-chip  HOM 
interference  is  useful  towards  scalable  high-bitrate  quantum  information  processing  and  com¬ 
munications. 


11 


Figure  9:  (a)  Experiment  setup  for  near-infrared  Hong-Ou-Mandel  interference  in  silicon  quan¬ 
tum  photonic  chip.  Fiber  polarization  controllers  are  used  to  ensure  biphoton  splitting  via  fiber 
polarization  beam  splitter,  and  to  equalize  the  TM  polarization  coupling  onto  the  silicon  chip.  The 
photon  statistics  are  collected  with  one  single  photon  detector  triggering  the  other  to  diminish 
the  dark  counts  and  accidentals.  QWP:  quarter- wave  plate;  HWP:  half-wave  plate;  LPF:  low-pass 
filter;  BPF:  band-pass  filter;  PBS:  polarization  beam  splitter;  BS:  beam  splitter,  (b)  Optical  mi¬ 
crograph  of  nanofabricated  directional  coupler  in  silicon-on-insulator.  The  side  trenches  (in  white) 
are  intended  to  mark  and  locate  the  device.  Inset:  zoom-in  optical  micrograph  of  the  waveguide  di¬ 
rectional.  Both  scale  bars:  1-um.  (c)  SEM  of  silicon  inverse  taper  couplers  with  top  oxide  cladding 
waveguides.  Scale  bar:  20-um.  Inset:  end-view  of  protruded  silicon  waveguide.  Scale  bar:  200-nm. 


In  addition,  under  this  InPho  program,  the  Wong  group  developed  low-loss  photonic  chips 
with  total  fiber-waveguide-qubit  Gate-waveguide-fiber  insertion  loss  down  to  3-dB  or  less, 
as  one  of  the  program  milestones.  This  includes  the  fiber- waveguide  coupling  and  scattering 
losses  in  the  optical  components  on-chip.  This  also  includes  1-ns  delay  lines  on-chip,  with 
total  loss  of  a  few  dB.  Other  optical  components  developed  under  this  program  includes 
zero-phase-advance  delay  lines  [35],  polarization  beam  splitters,  chip-scale  interferometers, 
multiplexing  elements,  and  arrayed  input-output  elements. 

4.2  Ultrahigh  Flux  Entangled  Photon  Source 

The  SPDC  sources  is  implemented  using  PPKTP  crystal  samples  with  46.2  pm  grating 
periods,  one  from  Raicol  and  one  from  AdvR,  to  determine  their  phase  matching  curves. 
We  have  conducted  tests  that  indicate  that  nonlinear  coefficients  and  bandwidths  are  as 
expected,  with  Raicol  crystal  slightly  more  efficient  than  AdvR  crystal.  The  phase  matching 
wavelengths  for  degenerate  operation  are  shifted  to  the  blue  of  1560  nm.  MIT  achieved  a 
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Figure  10:  (a)  Coincidences  measured  on  the  optimal  directional  coupler  chosen  experimentally 
with  a  splitting  ratio  (SR)  less  than  1-dB.  A  triangle  fit  is  used  for  visibility  estimation.  A  raw  visi¬ 
bility  of  90.5%  is  observed  without  accidental  subtraction,  and  90.8%  with  accidentals  subtraction, 
(b)  Visibility  measured  with  different  pump  powers  for  both  chip  and  fiber  beam  splitter  imple¬ 
mentations,  for  comparison.  The  visibility  is  approximately  linearly  related  to  the  pump  power  as 
more  probability  of  multiple  biphoton  pairs  generated  in  one  gate  window.  The  first  order  theory 
is  plotted  as  dashed  line.  The  on-chip  visibility  is  slightly  lower  than  off-chip  one  by  about  3%, 
which  could  be  considered  to  be  induced  by  the  chip. 


maximum  pair  generation  rate  of  8.9-108  pairs/s  from  a  PPKTP  waveguide  at  89  mW  pump 
power,  as  shown  in  Fig.  15. 

4.3  Fiber-optic  Franson  interferometry 

Until  recently,  the  maximum  Fran¬ 
son  visibility  observed  was  limited  to 
98.2%  [36].  This  is  surprising,  since  polar¬ 
ization  measurements  in  the  CHSH  form  of 
Bell’s  inequality  violation  show  two-photon 
quantum-interference  visibility  of  1,99%  [37, 
38] .  Why  should  entangled  temporal  degrees 
of  freedom  show  lower  visibility  than  polar¬ 
ization  degrees  of  freedom?  It  was  found  by 
the  MIT  team  that  this  limitation  is  due 
to  dispersion  between  the  long  and  short 
paths  of  the  fiber  loop  in  each  arm  [29]. 
Three  cases  were  compared:  (i)  standard 
fiber  loop,  (ii)  narrow  bandpass  filter  for 
SPDC  source  to  reduce  the  dispersion  effect,  and  (iii)  dispersion  engineering  with  LEAF 
fiber  to  equalize  the  dispersion  between  the  long  and  short  paths  (without  the  narrowband 
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Figure  16:  PPKTP  photon  pair  generation. 
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Figure  11:  Scenario  of  the  timeline  for  the  photon  pairs,  (a)  The  delay  of  two  photon  pairs  is  set 
to  r/2  to  maximize  the  coincidences,  (b)  When  there  is  only  one  photon  pair  in  the  gate  window  of 
Dl,  there  is  still  possibility  that  D2  will  record  a  photon  event  due  to  gate  window  time  mismatch, 
(c)  When  there  are  two  photon  pairs  within  the  gate  window  and  separated  to  two  detectors,  there 
is  possibility  that  the  latter  photon  pair  will  be  cut  off  due  to  the  gate  window  time  mismatch. 


filter).  Visibilities  were  observed  of  98.2%,  99.4%,  and  99.6%  for  the  uncompensated  case 
(i),  the  bandpass  filtered  case  (ii),  and  the  compensated  unfiltered  case  (iii),  respectively,  as 
shown  in  Fig.  16.  All  were  measured  without  background  subtraction.  The  results  clearly 
indicate  that  dispersion  was  the  main  cause  of  visibility  degradation  in  uncompensated  Fran- 
son  interferometric  measurements,  and  that  we  are  now  able  to  recover  the  lost  visibility  with 
dispersion  engineering  of  the  fiber  loop.  Details  are  reported  in  Ref.  [29].  The  high  visibility 
we  have  obtained  indicates  the  feasibility  of  dual-basis  interferometry  QKD  described  in 
Sect.  3.2. 

In  addition,  under  this  program,  the  Wong  group  achieved  the  d-dimensional  frequency- 
bin  entanglement  of  a  phase  coherent  mode-locked  two-photon  state  in  the  infrared  communi¬ 
cations  wavelengths.  The  high-dimensional  mode-locked  state  exhibits  the  long-postulated 
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Figure  12:  Generation  and  quantum  revival  observations  of  the  high-dimensional  mode-locked 
two-photon  state,  a,  Illustrative  experimental  scheme.  FFPC:  fiber  Fabry-Perot  cavity;  FBG: 
fiber  Bragg  grating;  FPC:  fiber  polarization  controller;  LPF:  long  pass  filter;  PBS:  polarizing 
beamsplitter;  P:  polarizer;  S.C.:  single  counts;  C.C.:  coincidence  counts,  b,  Coincidence  counting 
rate  as  a  function  of  the  relative  delay  AT  between  the  two  arms  of  the  HOM  interferometer.  The 
HOM  revival  is  observed  in  the  two-photon  interference,  with  dips  at  19  time-bins  in  this  case.  The 
visibility  change  across  the  different  relative  delays  arises  from  the  single  frequency  bin  bandwidth, 
c,  Zoom-in  coincidence  around  zero  relative  delay  between  the  two  arms.  The  dip  width  was  fitted  to 
be  3.86  ±  0.30  ps,  which  matches  well  with  the  245  GHz  phase-matching  bandwidth.  The  measured 
visibility  of  the  dip  is  observed  at  87.2  =t  1.5%,  or  96.5%  after  subtracting  the  accidental  coincidence 
counts,  d,  Measured  bin  visibility  versus  HOM  delay,  compared  with  theoretical  predictions. 


revival  of  the  Hong-Ou-Mandel  quantum  interference  [39],  up  to  19  time-bins  and  with 
visibilities  up  to  96.5%  as  shown  in  Fig.  12.  Moreover,  frequency  correlations  and  anti¬ 
correlations  of  the  d-dimensional  quantum  state  are  observed  as  summarized  in  Fig.  13.  We 
further  witness  the  high-dimensional  time-bin  entanglement  through  a  stabilized  Franson 
interferometer.  Revival  of  the  Franson  interference  in  the  coincidence  counting  rate  has 
been  witnessed  at  the  discrete  time  bins,  where  the  time  bin  separation  is  the  cavity  round 
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Figure  13:  Quantum  frequency  correlation  measurement  of  the  mode-locked  quantum  state,  a, 
Experimental  schematic  for  the  frequency  correlation  measurement.  Signal  and  idler  photons  are 
sent  to  two  narrow  band  filters  for  the  frequency  bin  correlation  measurement  with  coincidence 
counting.  Each  filter  consists  of  a  FBG  and  a  circulator.  The  FBGs  have  matched  FWHM  band¬ 
width  of  0.1  nm  and  are  thermally  tuned  for  the  scans  from  -4th  to  +4th  frequency  bins  from  the 
center,  b,  Measured  frequency  correlation  of  the  MLTS.  The  coincidence  counting  rate  is  recorded 
while  the  signal  and  idler  filters  are  set  at  different  frequency  bin  numbers. 

trip  time,  i.e.,  the  revival  time  of  the  mode-locked  two-photon  state,  as  shown  in  Fig.  14. 
The  interference  visibility  is  measured  up  to  97.8%.  The  bright  high-dimensional  frequency 
bin  entangled  state  encodes  4  quantum  bits  per  photon  with  high  photon  flux,  allowing 
applications  in  dense  quantum  information  processing  and  secure  quantum  key  distribution 
channels. 

4.4  Scalable  integration  of  superconducting  nanowire  single-photon 
detectors  on-chip 

Superconducting  nanowire  single  photon  detectors  (SNSPDs)  are  an  attractive  choice  for 
integration  with  PICs  due  to  their  unmatched  combination  of  sub-10-ns  dead  time,  sub-40-ps 
timing  jitter  [40],  and  near-unity  detection  efficiency  [41]  in  the  near-infrared.  The  team’s 
approach  to  achieving  high  coupling  efficiencies  (>50%)  between  superconducting  nanowire 
single-photon  detectors  (SNSPDs)  and  incident  light  is  the  integration  of  these  detectors 
with  waveguides  directly  on  the  PIC.  Integrating  the  entire  optical  system  on  a  single  chip 
reduces  coupling  losses  and  increases  system  scalability.  However,  state-of-the-art  SNSPDs 
are  fabricated  using  NbN  films  that  are  grown  on  bulk  Sapphire  or  MgO  wafers.  As  a  result 
standard  detectors  are  not  suitable  for  integration  with  an  existing  on-chip  optical  system. 
To  overcome  this  problem,  MIT  developed  a  process  to  fabricate  high-performance  NbN 
SNSPDs  on  membranes  of  silicon  nitride  (SiN). 

Recent  efforts  to  integrate  these  detectors  with  optical  waveguides  used  an  evanescent 
coupling  scheme  [42]  in  which  a  hairpin-shaped  detector  in  close  proximity  to  a  waveguide 
absorbs  the  guided  light  via  evanescent  coupling.  Prior  work  was  based  on  the  direct  fab¬ 
rication  of  SNSPDs  on  top  of  waveguides,  yielding  single-channel  waveguide-detectors  with 
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Figure  14:  Measured  Franson  interference  around  different  relative  delays  of  arm2.  a  to  f,  Franson 
interferences  at  time  bin  #1  (AT  =  0),  #2  (AT  =  66.7  ps),  #3  (AT  =  133.4  ps),  #4  (AT  =  200.1 
ps),  #5  (AT  =  266.9  ps),  and  #6  (AT  =  333.6  ps)  respectively.  Also  included  in  the  panel  a  is 
the  interference  measured  away  from  the  above  time  bins  at  AT  =30  ps  (stars,  in  panel  a),  with  no 
observable  interference  fringes.  The  first  datapoint  in  each  panel  (of  the  different  relative  Franson 
delays)  includes  the  error  bar  across  each  data  set,  arising  from  Poisson  statistics,  experimental 
drift  and  measurement  noise.  The  error  bars  from  repeated  coincidence  measurements  are  sizably 
smaller  than  the  observed  coincidence  rates  in  our  measurement  and  setup.  In  each  panel,  the  red 
line  denotes  the  numerical  modeling  of  the  Franson  interference  on  the  high-dimensional  quantum 
state,  g,  Theoretical  fringe  envelope  of  Franson  interference  for  the  high-dimensional  mode-locked 
two-photon  state,  with  superimposed  experimental  observations.  The  marked  labels  (a  to  f,  and  a’) 
correspond  to  the  actual  delay  points  from  which  the  above  measurements  are  taken,  h,  Witnessed 
visibility  of  high-dimensional  Franson  interference  fringes  as  a  function  of  AT.  The  experimental 
(and  theoretical)  witnessed  visibilities  for  the  k-th  order  peaks  are  97.8%  (100%),  93.3%  (96.0%), 
83.0%  (86.8%),  74.1%  (75.6%),  59.0%  (64.0%),  and  45.4%  (53.3%)  respectively. 

20%  [43]  and  up  to  near-unity  quantum  efficiency  [44].  However,  this  approach  was  not  scal¬ 
able  to  multiple  detectors  within  the  same  photonic  circuit  since  the  yield  of  SNSPDs,  based 
on  sub- 100-nm- wide  4-nm-thick  niobium  nitride  (NbN)  nanowires,  is  limited  by  defects  at 
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Figure  15:  Maximum  pair  generation  rate:  8.9  x  108  pairs/s  at  89  mW  pump.  Detector  donditions: 
627.4  MHz  (1.255  GHz)  sinusoidal  gating  with  duty  cycle  of  0.25,  measuring  773  kcps  (586  kcps) 
raw  coincidences. 

the  nanoscale  [45],  resulting  in  sub-1%  efficiency  per  detector  [46]  for  a  circuit  with  only 
two  detectors.  In  light  of  these  limitations  scaling  to  larger  number  of  high-performance 
detectors  within  the  same  photonic  circuit  is  challenging. 

The  micro-scale  hip-chip  process  developed  in  this  program  solves  these  yield  problems 
and  allows  for  the  integration  of  an  almost  arbitrary  number  of  high-performance  detectors 
on  high-performance  PICs  (limited  practically  only  by  the  high-speed  readout  from  the  cryo¬ 
stat).  Fig.  17(a)  illustrates  a  sketch  of  our  method  in  which  the  detectors  were  fabricated 
on  thin  membranes  and  transferred  onto  waveguides.  Through  careful  pre-transfer  selection 
of  detectors  large  arrays  of  high-performance  on-chip  integrated  detectors  (Fig.  1(b)).  We 
tested  a  linear  optical  network  with  two  input  and  four  output  ports,  each  coupled  to  an 
on-chip  single-photon  detector.  This  circuit,  shown  in  Fig.  1(c),  was  used  to  perform  the 
first  on-chip  heralded  measurement  of  the  correlation  function  g^2\r)  of  photon  pairs  gen¬ 
erated  from  spontaneous  parametric  down  conversion.  We  additionally  showed  that  these 
detectors  have  sub-50-ps  jitter  and  sub-10-ps  dead  time  with  high  system  and  on-chip  effi¬ 
ciency,  making  them  suitable  for  high-speed  time-encoded  quantum  key  distribution  (QKD) 
protocols.  These  measurements  provide  a  method  for  integrating  high-performance  detec¬ 
tors  on  complex  optical  circuits  and  a  step  towards  scalable  quantum  information  processing 
on-chip. 

We  characterized  the  proof-of-concept  PIC  chip,  shown  in  Fig.  17(c) ,  with  four  membrane- 
detectors  integrated  with  two  directional  couplers.  Light  was  coupled  into  the  silicon  waveg¬ 
uides  via  lensed-fiber  coupling  into  an  inverse  taper.  We  achieved  roughly  3  dB  insertion 
loss  with  this  method.  The  resulting  system  detection  efficiency  (SDE)  is  shown  in  Fig. 
19(a).  The  SDE  includes  all  losses  (coupling  and  transmission  losses)  between  the  input 
fiber  port  outside  the  cryostat  and  the  detector.  The  detectors  sub-50ps  and  10-35%  on-chip 
detection  efficiency  (2-8.5%  system  efficiency)  at  800k  system  dark  counts  per  second.  This 
corresponds  to  a  maximum  system  efficiency  of  19%  for  input  A  and  7%  system  efficiency 
for  input  B,  an  improvement  by  three  orders  of  magnitude  compared  to  previous  approaches 


18 


B2 


Figure  17:  (a)  Schematic  sketch  of  integration  of  superconducting  single-photon  detectors  with 
photonic  waveguides  via  physical  transfer  of  the  detector  fabricated  on  top  of  a  thin  carrier  mem¬ 
brane.  (b)  Sketch  of  resulting  on-chip  detector  array  using  the  concept  shown  in  (a),  (c)  Top-down 
optical  micrograph  of  photonic  chip  with  4  integrated  detectors. 

at  multi-detector  integration. 

5  QKD  System  Demonstrations 

5.1  Coding 

A  central  component  of  the  QKD  demos  is  to  understand  the  fundamental  limits  of 
secure  optical  channels.  MIT  completed  the  information  theoretic  key-rate  analysis  for  QKD 
schemes  using  an  optical  channel  with  1)  a  normal  transmitter,  and  2)  a  temporally-entangled 
photon  source;  see  Ref.  [47].  In  both  cases  we  assume  that  the  terminals  are  restricted  to 
direct  detection.  In  the  first  case,  maximum  key  rate  behaves  very  much  like  the  capacity  of 
the  Poisson  channel  (for  normal,  not  necessarily  secret,  data  transmission).  In  particular,  if 
Fock  states  can  be  transmitted,  photon  efficiency  scales  like  minus  logarithm  of  the  average 
photon  number  per  channel  use;  while  if  only  coherent  states  can  be  transmitted,  then  we  lose 
a  double-logarithmic  term.  Furthermore,  PPM  is  close  to  optimal  for  both  Fock-state  and 
coherent-state  inputs.  In  the  second  case,  maximum  photon  efficiency  is  approximately  the 
same  as  in  the  first  case.  However,  in  this  case,  restricting  to  a  “naive”  PPM  coding  scheme 
induces  the  double-logarithmic  loss  (which  is  observed  in  the  first  case  when  coherent-state 
inputs  are  used).  Most  of  this  loss  can  be  retrieved  using  a  more  elaborate  code. 

The  second  component  of  the  coding  analysis  focused  on  the  design  of  efficient  codes  and 
algorithms  for  establishing  a  secret  key  between  two  parties,  named  Alice  and  Bob,  in  high¬ 
dimensional  QKD  systems.  In  such  systems,  the  observation  time  is  typically  partitioned 
into  frames  of  fixed  duration,  with  pulse-position  modulation  (PPM)  coding  used  within  each 
frame,  via  which  a  secret  key  is  established  between  the  parties.  In  Ref.  [48],  we  derived  an 
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Figure  18:  (a)  Scanning  Electron  Micrograph  (SEM)  of  a  superconducting  single-photon  detector 
based  on  82-nm-wide  superconducting  nanowires.  The  purple  strip  marks  the  intended  location  of 
the  waveguide  after  the  integration  is  complete.  The  meander-shaped  detector  is  surrounded  by  a 
grid  of  dummy  structures  (parallel  lines  in  dark  grey)  required  to  improve  e-beam  exposure  dose 
uniformity  resulting  in  higher  nanowire  uniformity  (see  SI  for  details  on  exposed  pattern).  The 
length  of  the  detector  is  given  by  the  minimum  coupling  length  required  to  reach  >50%  optical 
absorption  in  the  detector,  which  was  obtained  from  optical  simulations  (see  SI).  The  inset  shows 
a  locally-magnified  SEM  of  the  detector,  (b)  SEM  of  suspended  SiNx  membrane  with  detector  on 
top.  (c)  The  membrane-detector  was  removed  from  the  carrier  chip  using  a  tungsten  microprobe 
covered  with  PDMS.  The  membrane  was  then  flipped  and  the  detector  aligned  to  the  waveguide 
under  an  optical  microscope.  The  gold  pads  on  the  membrane  contacted  matching  gold  pads  on 
the  waveguide  substrate,  (d)  Optical  micrograph  of  membrane-detector  integrated  with  a  silicon 
waveguide,  (e)  Top-down  SEM  of  waveguide-integrated  detector  located  within  the  region  marked 
by  a  dashed  line  in  (d)  The  silicon  waveguide  is  highlighted  in  purple. 

efficient  class  of  schemes  with  adaptive  frame  size  whose  performance  can  converge  to  the 
fundamental  limit  more  quickly  than  conventional  simple  PPM.  With  PPM  schemes,  Alice 
and  Bob’s  observations  are  converted  into  large-alphabet  sequences,  but  with  many  errors. 
Efficient  error  correction  and  privacy  amplification  are  further  required.  We  notice  that  well- 
studied  Reed-Solomon  codes  are  not  efficient  (or  even  capable)  in  our  key-distribution  appli¬ 
cations  where  the  symbol  error  rate  is  very  high.  As  a  result,  in  [49]  we  introduced  a  practical 
scheme  called  layered  scheme  for  correcting  errors  in  large-alphabet  secret  key  distribution. 
Both  theoretical  analyses  and  simulation  results  show  that  layered  schemes  have  near-optimal 
performances  on  q-ary  channels  such  as  uniform-error  channels  and  limited-magnitude-error 
channels.  In  addition,  in  [50]  we  investigate  privacy-amplification  methods  with  simple 
and  efficient  hardware  implementations,  in  particular,  linear  transformations  based  on  low- 
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Figure  19:  (a)  System  detection  efficiency  vs.  normalized  bias  current  of  the  waveguide-integrated 
detectors  shown  in  Fig.  1(c).  The  bias  current  (IB)  on  the  vertical  axis  was  normalized  by  the 
maximum  bias  current  (switching  current  ISW)  of  the  detector,  namely  ISW(Al)=,  ISW(B2),  The 
circles  mark  the  bias  point  (operation  point  OP)  chosen  for  subsequent  photon  coincidence  mea¬ 
surements.  The  OP  were  XXuA  (Al),  XXuA  (A2),  XXuA  (A3)  and  XX  uA  (A4).  (b)  Instrument 
Response  Function  of  the  waveguide-detectors  shown  in  Fig.  1(c).  The  detectors  were  biased  at 
the  operation  points  marked  in  (a). 


density  random  matrices.  We  show  that  this  method  can  achieve  the  information-theoretical 
upper  bound  on  efficiency  for  a  wide  range  of  key-distribution  systems.  By  combining  all 
the  techniques  above  developed  for  modulation,  error  correction  and  privacy  amplification, 
we  can  achieve  a  practical  protocol  for  high-dimensional  QKD  with  performance  close  to  the 
information-theoretical  limit. 

The  experimental  demonstrations  focused  on  several  implementations,  as  will  be  dis¬ 
cussed  now. 

5.2  DO-QKD  Implementation 

The  major  components  of  the  DO-QKD  demo  are  sketched  in  Fig.  20.  Entangled  photon 
pairs  are  produced  by  an  SPDC  source  held  by  Alice.  Alice  keeps  one  photon  in  each  pair  and 
sends  the  other  to  Bob.  Alice  and  Bob  detect  their  photons  in  two  conjugate  measurement 
bases  —  either  directly  or  after  normal/anomalous  group  velocity  dispersion.  The  shared 
timing  correlations  between  pairs  of  detected  photons  are  used  to  produce  the  key.  The 
detectors  are  WSi  SNSPDs  [41]  provided  by  the  group  of  Sae  Woo  Nam  of  NIST.  The  group 
velocity  dispersion  comes  from  dispersion  compensation  modules  produced  by  TeraXion, 
providing  600  ps/nm  of  normal/anomalous  dispersion. 

To  bound  an  eavesdropper’s  information  about  the  key,  Alice  and  Bob  must  measure  the 
increase  in  the  frequency  correlations  between  their  photons.  We  assume  that  direct  detec¬ 
tion  measurements  are  used  to  generate  key  and  measurements  made  using  group  velocity 
dispersion  are  used  as  a  security  check;  therefore,  by  quantifying  the  increase  in  the  frequency 
correlations,  Alice  and  Bob  can  learn  an  eavesdropper’s  effects  on  their  direct  detection  mea¬ 
surements.  The  baseline  frequency  correlation  is  determined  by  crcoh,  the  coherence  time  of 
the  SPDC  pump  field.  The  observable  increase  in  the  correlation,  and  therefore,  the  upper 
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bound  on  the  eavedropper’s  information,  is  limited  by  hardware  —  both  the  detectors  and 
the  dispersive  elements.  In  the  current  system,  an  eavesdropper  can  obtain  a  maximum  of 
1.09  bpc,  or  bits  per  detected  photon  coincidence.  Preliminary  tests  suggest  the  possibility 
of  obtaining  at  least  4  secure  bits  per  coincidence.  Details  are  described  in  a  manuscript  to 
be  submitted  [51]. 
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Figure  20:  (a)  Experimental  setup  for  DO-QKD  experiment,  using  degenerate  entangled  photon 
pairs  created  with  by  SPDC  in  a  PPKTP  waveguide  and  detected  either  directly  or  after  nor¬ 
mal/anomalous  group  velocity  dispersion,  (b-e)  Coincidence  measurements  across  detectors  D1 
and  D2  for  the  four  combinations  of  direct  detection  and  normal/ anomalous  dispersion.  Clearly, 
the  variance  is  small  when  both  Alice  and  Bob  measure  directly  or  after  normal/ anomalous  dis¬ 
persion;  in  the  other  cases,  the  uncertainty  is  greatly  increased  to  ~  600ps,  the  GVD  delay  of  the 
dispersive  optics  systems,  as  expected. 


5.3  Implementations  of  high-dimensional  QKD 

Led  by  Tian  Zhong  and  co-PI  Franco  Wong  we  demonstrated  the  full  high-dimensional 
QKD  (HDQKD)  protocol  whose  security  against  collective  Gaussian  attacks  was  achieved 
through  high- visibility  Franson  interferometry.  Two  experimental  implementations  of  the  full 
protocol  were  realized.  The  first  implementation  was  based  on  time-energy  entangled  pho¬ 
tons  generated  from  the  PPKTP  waveguide  source  via  SPDC,  and  we  used  self-differencing 
InGaAs  APDs  as  single-photon  detectors  that  were  gated  on  at  a  frequency  of  1.26  GHz. 
The  experimental  setup  for  entanglement-based  HDQKD  is  shown  in  Fig.  21.  The  orthog¬ 
onally  polarized  entangled  photons  were  coupled  into  a  single-mode  fiber  and  separated  by 
a  polarizing  beam  splitter.  The  photons  at  Alice  and  Bob  were  passively  switched  using 
50:50  fiber  beam  splitters  between  key  generation  and  Franson  interferometry.  Figure  22 
shows  the  optimized  results  for  the  secure  key  rates  without  and  with  5  dB  of  extra  loss 
that  simulates  a  25-km  fiber  link.  For  a  frame  size  of  64  bins,  each  with  bin  duration  of 
793  ps  (inverse  of  gating  frequency),  and  a  photon-pair  generation  rate  of  0.31%  per  bin, 
we  achieved  4  secure  bits  per  photon-pair  coincidence  and  a  secure  bit  rate  of  89  kb/s.  The 
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measured  results  include  passing  the  raw  data  through  error  correction  and  estimating  the 
secure  key  rate  after  privacy  amplification.  The  additional  5  dB  loss  reduces  the  secure  rate, 
as  expected,  but  does  not  affect  the  secure  bit  per  photon-pair  efficiency.  Security  in  both 
cases  was  provided  by  the  measured  Franson  visibility  of  99.6%  relative  to  the  theoretically 
achievable  visibility  of  99.8%  that  was  limited  by  the  pump’s  MHz  bandwidth.  Compared 
with  binary  encoding  such  as  the  state-of-the-art  BBM92  implementation  based  on  polariza¬ 
tion  entangled  photons  [A.  Treiber  et  al.  New  J.  Phys.  11,  045013  (2009)]  with  a  12.5  kb/s 
rate,  our  results  demonstrate  a  clear  improvement  in  photon  information  efficiency  (>  10  x) 
and  QKD  throughput  (7x). 


Figure  21:  Experimental  Setup  for  HDQKD  implementation  using  time-energy  entangled  photons. 
BPF:  band-pass  filter,  PBS:  polarizing  beam  splitter,  TDC:  time-to-digital  converter. 
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Figure  22:  Operating  parameters  and  results  for  entanglement-based  HDQKD  implementation. 

Our  second  implementation  used  an  attenuated  broadband  noise  source  in  a  pulse- 
position  modulation  scheme  in  conjunction  with  entanglement-based  Franson  security  checks, 
as  shown  in  Fig.  23.  The  classical  broadband  noise  source  was  derived  from  the  amplified 
spontaneous  emission  (ASE)  of  an  erbium-doped  fiber  amplifier  (EDFA)  output  and  a  high¬ 
speed  fiber  intensity  modulator  randomly  chose  a  time  bin  for  PPM  transmission.  Using 
an  optical  switch  Alice  randomly  chose  to  send  either  the  ASE  light  (70%)  or  the  SPDC 
entanglement  source  output  (30%)  to  Bob.  A  spectral  filter  ensured  that  the  light  received 
by  Bob  was  spectrally  indistinguishable.  Bob  used  a  50-50  fiber  beam  splitter  to  passively 
choose  either  key  generation  or  Franson  interferometry.  We  obtained  a  Franson  visibility 
similar  to  that  obtained  in  the  entanglement-based  HDQKD  implementation.  Figure  24 
shows  the  operating  conditions  and  the  optimized  results  for  the  PPM  implementation  that 
yields  2.9  secure  bits  per  detected  photon  and  a  7.3  Mb/s  secure  key  rate,  suggesting  that 
HDQKD  with  the  classical  PPM  implementation  can  significantly  improve  the  overall  secure 
key  rate.  We  should  point  out  that  the  entanglement-based  HDQKD  protocol  is  currently 
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limited  by  the  low  efficiency  (18%)  of  the  InGaAs  detectors  and  the  ^25%  duty  cycle  in  the 
gating  operation  of  the  detectors.  We  expect  a  50-  to  100-fold  secure  key  rate  improvement 
if  efficient  superconducting  nanowire  detectors  such  as  WSi  detectors  are  used. 


Figure  23:  Experimental  Setup  for  HDQKD  implementation  using  an  ASE  source  and  PPM.  A 
fast  intensity  modulator  with  a  pseudo-random  bit  sequence  input  places  the  ASE  light  into  the 
chosen  time  bin  within  the  PPM  frame.  A  second  pseudo-random  bit  sequence  input  to  a  fast 
optical  switch  transmits  the  PPM  frame  containing  ASE  photons  or  the  Franson  frame  containing 
the  SPDC  photons  in  a  70:30  ratio.  PBS:  polarizing  beam  splitter,  TDC:  time-to-digital  converter. 
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Figure  24:  Operating  parameters  and  optimized  results  for  HDQKD  implementation  using  an  ASE 
source  and  PPM. 


6  Publications  and  Presentations 

In  addition  to  four  manuscripts  currently  being  finished  for  publication,  the  following 
journal  articles  were  published: 

6.1  Journal  Publications 

1.  Directional  free-space  coupling  from  photonic  crystal  waveguides,  C.-C.  Tsai,  J.  Mower, 
and  D.  Englund,  Opt.  Express  19  (21),  20586-96  (2011) 

2.  Efficient  generation  of  single  and  entangled  photons  on  a  silicon  photonic  integrated 
chip,  J.  Mower  and  D.  Englund,  Phys.  Rev.  A  84  (2011) 


3.  Zero  phase  delay  in  negative-index  photonic  crystal  superlattices,  S.  Kocaman,  M.S. 
Aras,  P.  Hsieh,  J.  F.  McMillan,  C.  G.  Biris,  N.  C.  Panoiu,  M.  B.  Yu,  D.  L.  Kwong,  A. 
Stein,  and  C.  W.  Wong,  Nature  Photonics  5,  499  (2011). 
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4.  Private- Capacity  Bounds  for  Bosonic  Wiretap  Channels,  L.  Wang,  J.  H.  Shapiro, 
N.Chandrasekaran,  and  G.  W.  Wornell,  ArXiv:  1202. 1126  (2012)  “Efficient  single-spatial- 
mode  periodically  poled  KTi0P04  waveguide  source  for  high-  dimensional  entanglement- 
based  quantum  key  distribution,”  Tian  Zhong,  Franco  N.  C.  Wong, 

5.  Alessandro  Restelli,  and  Joshua  C.  Bienfang,  Opt.  Express,  20,  Issue  24,  pp.  26868- 
26877  (2012) 

6.  Xuetao  Gan,  Kin  Fai  Mak,  Yuanda  Gao,  Yumeng  You,  Fariba  Hatami,  James  Hone, 
Tony  F.  Heinz,  and  Dirk  Englund.  Strong  enhancement  of  light-matter  interaction  in 
graphene  coupled  to  a  photonic  crystal  nanocavity.  Nano  Letters,  12(11):5626-5631, 
2012. 

7.  High-dimensional  quantum  key  distribution  using  dispersive  optics,  J.  Mower,  P.  Des¬ 
jardins,  J.  H.  Shapiro,  D.  Englund,  Phys.  Rev.  A  87  (2013). 

8.  N.  Chandrasekaran  and  J.  H.  Shapiro,  “Photon  information  efficient  communication 
through  atmospheric  turbulence  -  Part  I:  Channel  model  and  propagation  statistics,” 
submitted  to  J.  Lightw.  Technol.  (2013) 

9.  N.  Chandrasekaran,  J.  H.  Shapiro,  and  L.  Wang,  “Photon  information  efficient  com¬ 
munication  through  atmospheric  turbulence  -  Part  II:  Bounds  on  ergodic  classical  and 
private  capacities,”  submitted  to  J.  Lightw.  Technol.  (2013) 

10.  Xuetao  Gan,  Hannah  Clevenson,  Pierre  Desjardins,  Luozhou  Li,  and  Dirk  Englund. 
Nanophotonic  filters  and  integrated  networks  in  flexible  2D  polymer  photonic  crystals. 
Nature  Scientific  Reports  3  (2145)  (2013) 

11.  Chip-integrated  ultrafast  graphene  photodetector  with  high  responsivity,  X.  Gan,  R.J. 
Shiue,  Y.  Gao,  I.  Meric,  T.  F.  Heinz,  K.  Shepard,  J.  Hone,  S.  Assefa,  &  D.  Englund, 
Nature  Photonics  AOP  (2013) 

12.  X.  Xu,  Z.  Xie,  J.  Zheng,  J.  Liang,  T.  Zhong,  M.  Yu,  S.  Kocaman,  G.-Q.  Lo,  D.-L. 
Kwong,  D.  R.  Englund,  F.  N.  C.  Wong,  and  C.  W.  Wong,  Near-infrared  Hong-Ou- 
Mandel  interference  on  a  silicon  quantum  photonic  circuit,  Optics  Express  Vol.  21(4), 
5014  (2013). 

13.  Tian  Zhong  and  Franco  N.  C.  Wong.  Nonlocal  cancellation  of  dispersion  in  Franson 
interferometry.  Phys.  Rev.  A  88,  020103(R)  (2013)  H.  Zhou,  V.  Chandar,  and  G. 
Wornell.  Low-density  random  matrices  for  secret  key  extraction.  IEEE  Int.  Symp. 
Inform.  Theory  (ISIT)  (2013) 

14.  Hongchao  Zhou,  Ligong  Wang,  and  Gregory  W.  Wornell.  Layered  schemes  for  large- 
alphabet  secret  key  distribution.  In  ITA,  pages  1-10  (2013) 

15.  Hongchao  Zhou  and  Gregory  Wornell.  Adaptive  pulse-position  modulation  for  high¬ 
dimensional  quantum  key  distribution.  In  Information  Theory  Proceedings  (ISIT), 
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16.  Z.  Zhang,  J.  Mower,  D.  Englund,  F.  N.  C.  Wong,  and  J.  H.  Shapiro,  “Unconditional 
Security  of  Time-energy  Entanglement  Quantum  Key  Distribution  using  Dual-basis 
Interferometry” ,  arXiv:  131 1.0825 

17.  Catherine  Lee,  Jacob  Mower,  Zheshen  Zhang,  Jeffrey  H.  Shapiro,  and  Dirk  Englund, 
“Finite-key  analysis  of  high-dimensional  dispersive  optics  quantum  key  distribution,” 
arXiv:  131 1.1233 


6.2  Filed  Patents 

•  Dirk  Englund  and  Xuetao  Gan,  WO/2013/148349  -  GRAPHENE  PHOTONICS  FOR 
RESONATOR-ENHANCED  ELECTRO-OPTIC  DEVICES  AND  ALL-OPTICAL  IN¬ 
TERACTIONS 

•  Jacob  Mower  and  Dirk  Englund,  WO/2013/112351  -  SYSTEMS  AND  METHODS 
FOR  TELECOMMUNICATION  USING  HIGH-DIMENSIONAL  TEMPORAL  QUAN¬ 
TUM  KEY  DISTRIBUTION 

•  Jacob  Mower  and  Dirk  Englund,  WO/2013/009946  -  CHIP  INTEGRATED  SINGLE 
PHOTON  GENERATION  BY  ACTIVE  TIME  MULTIPLEXING 

•  Jacob  Mower  and  Dirk  Englund,  WO/2013/103431  -  SYSTEMS  AND  METHODS 
FOR  COUPLING  ELECTROMAGNETIC  RADIATION  FROM  FIBER  ARRAYS 
INTO  WAVEGUIDES  AND  PHOTONIC  CHIPS 

•  WONG,  Chee,  Wei;  (US).,  WONG,  Franco,  N.c.;  (US).,  ENGLUND,  Dirk,  R.;  (US), 
WO/2013/052903  -  CHIP-SCALE  INTERFEROMETRY  FOR  HYPERENTANGLE¬ 
MENT  PROCESSING 

•  ENGLUND,  Dirk;  (US).,  MOWER,  Jacob;  (US).,  NAJAFI,  Faraz;  (US).,  HU,  Xiao- 
long;  (US),  BERGGREN,  Karl,  K.;  (US),  W02013112208)  -  COMPACTLY-INTEGRATED 
OPTICAL  DETECTORS  AND  ASSOCIATED  SYSTEMS  AND  METHODS 

•  ENGLUND,  Dirk;  SYSTEMS  AND  METHODS  FOR  MULTILEVEL  OPTICAL  STOR¬ 
AGE  IN  TUNABLE  PHOTONIC  CRYSTAL  CAVITIES 


6.3  Conference  Papers 

•  T.  Zhong,  F.  N.  C.  Wong,  A.  Restelli,  and  J.  C.  Biefang,  “Efficient  single-spatial- 
mode  PPKTP  waveguide  source  for  high  dimensional  entanglement-based  QKD,”  to 
be  presented  at  CLEO/QELS  2012,  paper  JThlK3. 

•  T.  Zhong  and  F.  N.  C.  Wong,  “Franson  interferometry  with  99.6%  visibility  via  fiberop¬ 
tic  dispersion  engineering,  “  in  11th  International  Conference  on  Quantum  Communi¬ 
cation,  Measurement  and  Computing,  Vienna,  Austria,  July  2012,  paper  accepted  for 
presentation. 
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•  D.  Englund  and  J.  Mower,  “Quantum  Optics  on  Silicon  Photonic  Chips” ,  Invited  Paper 
at  Frontiers  In  Optics  (San  Jose,  CA,  Oct.  18,  2011) 

•  On  High-Efficiency  Optical  Communication  and  Key  Distribution,  Yuval  Kochman 
and  Gregory  W.  Wornell,  ITA,  San  Diego  (2012) 

•  Private- Capacity  Bounds  for  Bosonic  Wiretap  Channels,  Ligong  Wang,  Jeffrey  H. 
Shapiro,  Nivedita  Chandrasekaran,  and  Gregory  W.  Wornell,  submitted  to  IEEE  In¬ 
ternational  Symposium  on  Information  Theory  (2012) 

•  F.  N.  C.  Wong,  “Time-energy  entangled  waveguide  source  for  high-dimensional  QKD,“ 
in  Laser  Science  XXVII,  San  Jose,  CA,  October  2011,  invited  paper  LTuF4. 

•  J.  Mower  and  D.  Englund,  “High-dimensional  quantum  key  distribution  using  disper¬ 
sive  optics,”  submitted  for  Frontiers  in  Optics,  Rochester,  NY,  2012 

•  Ligong  Wang  Yuval  Kochman  and  Gregory  W.  Wornell.  Toward  photon-efficient  key 
distribution  over  optical  channels.  Submitted  to  IEEE  Transactions  on  Information 
Theory,  2013. 

•  H.  Zhou  and  G.  Wornell.  Adaptive  pulse-position  modulation  for  high-dimensional 
quantum  key  distribution. 

•  Hongchao  Zhou,  Ligong  Wang,  and  Gregory  W.  Wornell.  Layered  schemes  for  large- 
alphabet  secret  key  distribution.  In  ITA,  pages  1-10,  2013. 

•  H.  Zhou,  V.  Chandar,  and  G.  Wornell.  Low-density  random  matrices  for  secret  key 
extraction.  IEEE  Int.  Symp.  Inform.  Theory  (ISIT),  2013. 
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